Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File:                     xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier:          cnuXMVurwJ7RbxaY1z76ccSvxmsZblwj1TLoBYJm2uk=
Subject key identifier:   2C:A3:27:AF:F7:D8:78:2A:BC:CA:AD:6A:FB:13:CC:1F:07:47:16:7D
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer:       /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial:       0169
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number:          0168
Signing time:             Thu 21 Nov 2024 02:31:34 +0000
Manifest this update:     Thu 21 Nov 2024 02:31:34 +0000
Manifest next update:     Sat 23 Nov 2024 02:31:34 +0000
Files and hashes:         1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: lNP8ZemwEchmu7AQ4c/4tAXLfrj8kA6o1NcenfOUtiY=)
                          2: 7D17B42896CB11EE95131775D25BE465.roa (hash: lyBR/cQIvWWlFcZm6KCvK7zlk6UMRx5/0YmgP37XBjY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
        Validity
            Not Before: Nov 21 02:31:34 2024 GMT
            Not After : Nov 23 02:31:34 2024 GMT
        Subject: CN=673e9b86-b541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:96:c4:a2:ad:f7:d1:22:56:8e:0e:02:fc:6b:
                    df:92:bc:50:d5:2f:23:28:5a:72:c5:15:9c:11:b7:
                    70:28:a8:66:20:9e:14:24:c4:ea:d2:9c:9e:8c:96:
                    42:b4:fe:fa:43:7d:c6:b6:d9:bc:34:39:0f:0d:ab:
                    df:fa:f0:81:7b:f0:23:50:c9:70:ff:11:99:98:30:
                    3c:6b:6b:a5:8c:15:41:f3:21:05:91:c2:40:2e:85:
                    af:f0:f3:d5:50:9c:21:14:58:ff:73:e6:a1:36:64:
                    09:1a:b8:70:f1:76:78:48:30:8b:e7:90:bd:1e:7e:
                    a1:9f:ac:6f:e6:5e:35:6e:95:9e:0a:cd:68:3c:81:
                    6a:90:b4:2e:0a:e0:c1:44:20:f9:9f:45:43:a8:a6:
                    e6:10:b7:64:ae:e5:62:e1:5d:ce:07:c0:84:8a:e6:
                    38:11:13:8c:07:76:dc:c6:1b:f4:b2:49:11:84:24:
                    94:d7:ce:71:73:06:8f:8e:ea:a9:f2:11:2a:b6:4a:
                    8b:48:61:23:49:ba:21:1e:ad:35:eb:5d:0b:7a:4b:
                    a1:af:78:d2:9b:b1:db:7c:21:21:03:9c:27:6c:f0:
                    16:6d:09:c8:8d:55:a6:43:24:2a:e2:28:02:ce:64:
                    68:87:fd:a1:1e:b5:80:3e:e8:f9:77:d3:c3:22:a3:
                    92:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A3:27:AF:F7:D8:78:2A:BC:CA:AD:6A:FB:13:CC:1F:07:47:16:7D
            X509v3 Authority Key Identifier:
                keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a6:22:58:08:92:73:9b:b6:47:37:18:3d:44:ee:68:f7:f2:
         f7:de:4a:d2:df:0b:4c:7f:c7:2b:d1:94:2b:df:b8:33:de:6d:
         cb:14:0f:86:aa:27:29:ed:c5:64:bf:bd:1a:f5:c4:e6:a2:ba:
         95:eb:ba:3c:c7:67:57:c0:b6:6d:88:d2:6a:bf:3b:0e:55:20:
         20:43:d1:e6:af:b0:9c:fa:ec:a1:b6:b2:76:2a:c7:f2:ee:ea:
         21:3d:b7:34:bf:d9:7d:9a:21:5e:45:65:44:99:ae:41:40:a9:
         b6:3e:40:9e:09:40:a9:65:36:cc:be:97:b7:58:68:8f:94:a9:
         b4:55:c3:06:ce:27:fd:0e:aa:06:4b:e1:07:9e:e7:a2:e6:9f:
         73:7a:f4:76:85:5e:c5:d2:d0:51:30:54:1c:34:4d:3b:ad:75:
         3b:1e:5d:96:bf:17:92:ff:89:b1:28:04:6a:ed:85:64:b2:db:
         b0:51:ad:0d:e1:86:a9:dc:b0:5e:9e:8c:51:62:b3:e6:75:c1:
         ae:80:d0:bb:bc:46:a9:0f:dc:90:31:ee:e9:09:b7:75:58:e0:
         da:b2:73:9f:7a:87:22:d7:ea:e5:c2:7b:d4:98:90:76:47:8b:
         98:b3:81:4e:6e:ff:eb:ff:ca:37:7e:29:86:ce:03:89:0b:6a:
         12:22:57:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:50 2024 by rpki-client on console-fra.rpki-client.org